Lucene search
K

CVE-2011-0766

🗓️ 31 May 2011 20:55:00Reported by ubuntu.comType 
ubuntucve
 ubuntucve
🔗 ubuntu.com👁 27 Views

The Crypto application before 2.0.2.2 uses predictable seeds based on the current time, making it easier for remote attackers to guess DSA host and SSH session keys. Debian squeeze has fix in 1:14.a-dfsg-3squeeze1. erlang-ssh in universe in lucid and natty. Patch only adds new functions to crypto library, doesn't change existing ones, so downgrading priority. Backport is difficult due to appup changes

Related
Refs
ReporterTitlePublishedViews
Family
Circl
CVE-2011-0766
19 Apr 202506:59
circl
CVE
CVE-2011-0766
31 May 201120:00
cve
Cvelist
CVE-2011-0766
31 May 201120:00
cvelist
Debian CVE
CVE-2011-0766
31 May 201120:00
debiancve
FreeBSD
Erlang -- ssh library uses a weak random number generator
25 May 201100:00
freebsd
EUVD
EUVD-2011-0778
7 Oct 202500:30
euvd
Fedora
[SECURITY] Fedora 15 Update: erlang-R14B-03.2.fc15
31 Jul 201104:01
fedora
Fedora
[SECURITY] Fedora 14 Update: erlang-R14B-03.1.fc14
31 Jul 201103:38
fedora
Tenable Nessus
Fedora 15 : erlang-R14B-03.2.fc15 (2011-9598)
1 Aug 201100:00
nessus
Tenable Nessus
Fedora 14 : erlang-R14B-03.1.fc14 (2011-9657)
1 Aug 201100:00
nessus
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation